Pin dependencies (#35)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [classabbyamp/treeless-checkout-action](https://github.com/classabbyamp/treeless-checkout-action) | action | pinDigest |  -> `bd3615a` |
| [ghcr.io/void-linux/void-buildroot-musl](https://voidlinux.org) ([source](https://github.com/void-linux/void-packages)) | container | pinDigest |  -> `40ab4df` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguNiIsInVwZGF0ZWRJblZlciI6IjM3LjM2OC42IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: snailed/void-packages-custom#35
Co-authored-by: Johnny5 <bot@snaile.de>
Co-committed-by: Johnny5 <bot@snaile.de>

.forgejo/workflows/publish.yaml

@@ -63,7 +63,7 @@ jobs:
       image: git.snaile.de/snailed/xbps-builder:${{ matrix.config.libc }}-latest
     steps:
       - name: Clone and checkout
-        uses: https://github.com/classabbyamp/treeless-checkout-action@v1
+        uses: https://github.com/classabbyamp/treeless-checkout-action@bd3615a6e9d5546151e17d72193eea0d6f297398 # v1
 
       - name: Prepare container
         run: |

.forgejo/workflows/test.yaml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
 
     container:
-      image: "ghcr.io/void-linux/void-buildroot-musl:20231230R1"
+      image: "ghcr.io/void-linux/void-buildroot-musl:20231230R1@sha256:40ab4dfdf55c3f2988f788780898093f1d6b808f5d3720aa836a7192c71bcad9"
       env:
         PATH: "/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/sbin:/usr/local/bin:/tmp/bin"
         LICENSE_LIST: common/travis/license.lst
@@ -41,7 +41,7 @@ jobs:
           # install tools needed for lints
           xbps-install -y grep curl git
       - name: Clone and checkout
-        uses: https://github.com/classabbyamp/treeless-checkout-action@v1
+        uses: https://github.com/classabbyamp/treeless-checkout-action@bd3615a6e9d5546151e17d72193eea0d6f297398 # v1
       - name: Create hostrepo and prepare masterdir
         run: |
           ln -s "$(pwd)" /hostrepo &&
@@ -130,7 +130,7 @@ jobs:
           xbps-install -yu
 
       - name: Clone and checkout
-        uses: https://github.com/classabbyamp/treeless-checkout-action@v1
+        uses: https://github.com/classabbyamp/treeless-checkout-action@bd3615a6e9d5546151e17d72193eea0d6f297398 # v1
       - name: Create hostrepo and prepare masterdir
         run: |
           ln -s "$(pwd)" /hostrepo &&